(Huawei) Authentic H12-711_V4.0-ENU Dumps - Reduce Your Chances of Failure

(Huawei) Authentic H12-711_V4.0-ENU Dumps – Reduce Your Chances of Failure

Jonnie Karnath2023-04-20T05:23:59+00:00

Certspots is a leading provider of H12-711_V4.0-ENU dumps designed to help candidates prepare for the exam and increase their chances of success. We offer authentic and up-to-date H12-711_V4.0-ENU dumps that are designed to simulate the actual exam environment, so candidates can get a feel for the types of questions they will encounter on the day of the exam. By practicing with Certspots authentic H12-711_V4.0-ENU dumps, candidates can evaluate their knowledge and skills, identify areas where they need to improve, and develop strategies for answering exam questions quickly and accurately. This will not only reduce their chances of failure but will also help them perform better on the actual exam.

Page 1 of 3

1. ARP man-in-the-middle attacks are a type of spoofing attack technique.

TRUE

FALSE

2. CORRECT TEXT

We should choose the encryption algorithm according to our own use characteristics. When we need to encrypt a large amount of data, it is recommended to use the ____ encryption algorithm to improve the encryption and decryption speed. [fill in the blank]

3. Which of the following descriptions of single sign-on is correct?

The visitor recited the Portal authentication page and sent the username and password to FT to identify his/her identity, and the password was not stored on the FT, and the FI sent the username and password to the third-party authentication server, and the authentication process was carried out on the authentication server.

The visitor sends the username and password that identifies his identity to the third-party authentication server, and after the authentication is passed, the third-party authentication server sends the visitor's identity information to F

F7 only records the identity information of the visitor and does not participate in the authentication process

Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the F

4. Which of the following characteristics does a denial-of-service attack include?

Unauthorized tampering of the mouth

Unauthorized access to the mouth

Unauthorized activation of the mouth

Unauthorized destruction of the mouth

5. When the Layer 2 switch receives a unicast frame and the MAC address table entry of the switch is empty, the switch discards the unicast frame.

TRUE

FALSE

6. The following description of asymmetric encryption algorithms, which item is wrong?

Compared with symmetric encryption algorithms, the security factor is higher.

Encryption is faster than symmetric encryption algorithms.

Public keys are generally disclosed to users.

Asymmetric encryption algorithms are a pair of keys, divided into public and private keys.

7. Certificates saved in DER format may or may not contain a private key.

TRUE

FALSE

8. CORRECT TEXT

In the authentication policy of the firewall, _____ allows the user to not need to enter the user name and password, but can obtain the corresponding relationship between the user and the IP, so as to carry out policy management based on the user [fill in the blank]

9. CORRECT TEXT

During the process of establishing IPSec VPN between peers FW_A and FW_B, two types of security associations need to be established in two stages. In the first stage, _____ is established to verify the identity of the peers. [fill in the blank]

10. Huawei Firewall only supports the inter-domain persistent connection function for TCP packets.

TRUE

FALSE

Page 2 of 3

11. Which of the following is not included in the Business Impact Analysis (BIA).

Risk identification

Impact assessment

Incident handling priority

Business priorities

12. When IPSec VPN uses tunnel mode to encapsulate packets, which of the following is not within the encryption scope of the ESP security protocol? () [Multiple choice]

ESP Header

TCP Header

Raw IP Header

ESP Tail

13. Which of the following is not the default security zone of the firewall ()[Multiple choice]

untrust trust

trust zone

dmz zone

isp zone)

14. The following description of the construction of a digital certificate, which item is wrong

The name of the device that issued the certificate can be different from the subject name in the issuer certificate.

The structure of the certificate follows the specification of the

509 v3 version.

The simplest certificate consists of a public key, a name, and a digital signature from a certificate authority.

The issuer signs the certificate information with the private key.

15. CORRECT TEXT

Drag the warning level of the network security emergency response on the left into the box on the right, and arrange it from top to bottom in order of severity. [fill in the blank]

16. CORRECT TEXT

Under normal circumstances, the Emai1 protocols we often talk about include ____, POP3, and SMTP. [fill in the blank]

17. 1.Regarding the characteristics of the routing table, which of the following items is described correctly

Port When a packet matches multiple entries in the routing table, it is forwarded based on the route entry with the largest metric.

Port In the global routing table, there is at most one next hop to the same destination CIDR block.

There may be multiple next hops in the global routing table to the same destination.

Port When a packet matches multiple entries in the routing table, it is forwarded according to the longest mask.

18. Which of the following descriptions about the main implementation of single sign-on is wrong? () [Multiple choice]

Accept PC message mode

Query the AD server security log mode

Query the syslog server mode

Firewall monitors AD authentication packets

19. The following description of IDS, which items are correct

The IDS cannot be linked to the firewall.

Mouth IDS is a fine-grained detection device, through which the live network can be monitored more accurately.

The IDS can be upgraded flexibly and in a timely manner, and the strategic configuration operation is convenient and flexible.

With IDS, system administrators can capture traffic from critical nodes and do intelligent analysis to find anomalous and suspicious network behavior and report it to administrators.

20. Which of the following protocols is a file transfer protocol?

Mouth POP3

Mouth NFS

Mouth HITP

Mouth DFTP

Page 3 of 3

21. Social engineering is a means of harm such as deception, harm, etc. through psychological traps such as psychological weaknesses, instinctive reactions, curiosity, trust, and greed of victims ()

TURE

False

22. In the Linux system, which of the following is the command to query the P address information? () [Multiple choice]

ifconfig)

display ip interface brief

ipconfig

display ip

23. Which of the following descriptions of server authentication is correct?

The visitor sends the username and password that identifies his identity to FW through the portal authentication page, there is no password stored on F7, FT sends the username and password to a third-party authentication server, and the verification process is carried out on the authentication server.

Visitors obtain the SMS verification code through the Portal authentication page, and then enter the SMS verification code to pass the authentication.

The visitor sends the username and password that identifies them to the FW through the portal authentication page, on which the password is stored and the verification process takes place on the F

24. Both digital envelopes and digital signatures guarantee data security and verify the origin of data.

TRUE

FALSE

25. Which of the following operating modes does NTP support?

Mouth peer mode

Mouth client/server mode

Mouth broadcast mode

Mouth multicast mode

26. For which of the following parameters can the packet filtering firewall filter?

Port packet payload

IP address of the port source destination

The MAC address of the source destination

Port number and protocol number of the port source

27. eradication phase [fill in the blank]

28. As shown in the figure, the administrator needs to test the network quality of the 20.0.0/24 CIDR block to the 40.0.0/24 CIDR block on Device B, and the device needs to send large packets for a long time to test the network connectivity and stability.

tracert -a 20.0.0.1 -f 500 -q 9600 40.0.0.2

ping -a 20.0.0.1 -c 500 -s 9600 40.0.0.2

ping -s 20.0.0.1 -h 500-f 9600 40.0.0.2

tracert -a 20.0.0.1 -c 500 -w 9600 40.0.0.2

29. The following description of investigation and evidence collection, which one is correct

Documentary evidence is required in computer crime.

In all investigation and evidence collection, it is best to have law enforcement agencies involved.

Evidence is not necessarily required in the course of the investigation.

Evidence obtained by wiretapping is also valid.

Facebook Twitter LinkedIn Google + Email